Can We Trust Functionally Correct Patches Generated by Code Agents?